PT-1999-1638 · Microsoft · File Manager+2

Publicado 1999-12-31 · Atualizado 2017-10-10 · CVE-1999-1294

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Windows 3.51

Description: The issue allows local users to read folders for which they do not have permission due to the inheritance of backup and restore permissions by programs started from the Office Shortcut Bar (OSB) in Windows 3.51, such as File Manager.

Recommendations: For Windows 3.51, consider restricting access to the Office Shortcut Bar (OSB) to minimize the risk of exploitation, and avoid using the OSB to start programs that require elevated permissions.

Correção

Identificadores relacionados

CVE-1999-1294

Produtos afetados

File Manager

Office Shortcut Bar

Windows 3.51

Referências · 3

• http://support.microsoft.com/support/kb/articles/q146/6/04.asp · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-1999-1294 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/562 · Nota